With the current method you always have the risk, no matter which keywords
you filter on ("secret", "password", etc.), that the key name is mistyped
and inadvertently logged.Perhaps we could implement something like TravisCI's encryption keys [ https://docs.travis-ci.com/user/encryption-keys/] at a cost of added complexity. On Wed, Mar 28, 2018 at 4:38 PM, Vinay Patil <[email protected]> wrote: > Hi, > > I see plain text SSL passwords in log file (printed by > GlobalConfiguration) , because of which we cannot deploy our pipeline to NR > environment. > > I am able to avoid this by having ERROR log level for this class but the > security team still think it is a risk. > > Is this taken care in the new release ? (I am using Flink 1.3.2) > > Regards, > Vinay Patil >
